Knottedness is in NP, modulo GRH 
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Given a tame knot K presented in the form of a knot diagram, we show that the problem of determining 
whether K is knotted is in the complexity class NP, assuming the generalized Riemann hypothesis (GRH). In 
other words, there exists a polynomial-length certificate that can be verified in polynomial time to prove that 
K is non-trivial. GRH is not needed to believe the certificate, but only to find a short certificate. This result 
complements the result of Hass, Lagarias, and Pippenger that unknottedness is in NP. Our proof is a corollary 
of major results of others in algebraic geometry and geometric topology. 



1. INTRODUCTION 

The algorithmic complexity of unknottedness is a long- 
standing open problem. In other words, given a knot K de- 
scribed by a knot diagram or by a triangulation of its com- 
plement, is there a fast algorithm to decide whether K is the 
unknot? (The question makes sense for tame knots; all knots 
in this article will be tame.) Haken lfT2l was the first to show 
that there is any algorithm. Currently it is not known whether 
unknottedness can be decided in polynomial time. The ques- 
tion can be written 

Unknottedness e P, 

since P is the class of yes-no functions (or yes-no questions or 
decision problems) on input strings that can be computed in 
polynomial time. 

Hass, Lagarias, and Pippenger 1 15 1 introduced the study of 
qualitative rather than quantitative bounds on the algorithmic 
complexity of problems in low-dimensional topology. They 
showed that unknottedness is in the complexity class N P. This 
is the class of yes-no questions for which an answer of yes can 
be confirmed in polynomial time with the aid of an auxiliary 
string called a witness, a proof, or a certificate. For example, 
the question of whether an integer N (written in binary) is 
composite is trivially in N P, because a certificate can consist 
of a factorization N = AB that proves that N is composite. 

By definition, the class coNP is the class of questions 
whose negations, with no and yes switched, are in NP. In 
other words, a problem is in coN P if there is a certificate for no 
rather than yes. For example, it is a non-trivial result that pri- 
mality, the negation of compositeness, is in NP, equivalently 
that compositeness is in coNP |23|. This result began an en- 
couraging chain of results. The computational complexity of 
primality was improved qualitatively in stages until finally it 
was established that primality is in P 0] [TOl ED EU ■ How- 
ever, there are other problems that are in both NP and coNP 
that are thought to be hard, for instance, determining whether 
an integer is the product of two primes. 

Theorem 1.1. Let K C S 3 be a knot described by a knot dia- 
gram, a generalized triangulation, or an incomplete Heegaard 
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diagram. Then the assertion that K is knotted is in N P, assum- 
ing the generalized Riemann hypothesis ( GRH). 

Together with Hass-Lagarias-Pippenger, we can restate the 
result as 

Unknottedness e NPncoNP, 

assuming GRH. The complexity theory significance of this 
result is that unknottedness is not NP-hard, assuming stan- 
dard conjectures in both number theory and complexity the- 
ory. (See Section [2]) It is instead in the class of intermediate 
problems, such as graph isomorphism and factoring integers, 
that either have undiscovered polynomial-time algorithms or 
are hard for some other reason. 

We clarify the sense in which Theorem 1 1 . 1 1 depends on the 
generalized Riemann hypothesis. Since the role of the verifier 
for a problem in N P is to evaluate a proof of "yes", the veri- 
fier might need to assume a conjecture such as GRH to believe 
the proof. This is not the case for our construction in Theo- 
rem |TTT| Our certificates are unconditionally convincing, and 
they always exist. The only role of GRH is to establish that the 
certificate has polynomial length. Instead of assuming all of 
GRH, we can assume a much weaker corollary, Theorem |3.2| 
The corollary asserts that for every non-constant univariate in- 
teger polynomial h(x), there is a moderately small prime p 
such that h(x) has a root in Z/p. 

Our proof of Theorem 1 1 . 1 1 quickly follows from major re- 
sults of others. Kronheimer and Mrowka |[T8ll showed that if 
A" is a non-trivial knot, then there is a non-commutative repre- 
sentation of 

p c : %\ (S 3 \ K) ->■ SU(2) c SL(2,C). 

Then, simply because the equations for the representation are 
algebraic, the complex numbers can be replaced by a finite 
field Z/p. Koiran [ 17] showed that if a polynomial-length set 
of algebraic equations has a complex solution, and if GRH is 
true, then there is a suitable prime p with only polynomially 
many digits. Thus, the certificate is a prime p and a 2 x 2 
matrix over Z/p for each generator of the knot group. The 
verifier must check that the generator matrices satisfy the re- 
lations of the knot group; and that they do not all commute, or 
in the Wirtinger presentation, that they are not all equal. This 
confirms that K cannot be the unknot. 
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1.1. Related work 

See Section[2]for some discussion of the complexity classes 
mentioned here. 

Koiran ifTTl DIMACS version] showed that the question of 
whether integer polynomial equations have a complex solu- 
tion is in AM, assuming GRH. (He also remarks that the prob- 
lem is NP-hard, so it is NP-complete assuming both GRH and 
NP = AM.) This implies for us that knottedness is in AM. Our 
idea is to use his constructions rather than his ultimate result 
to establish that it is in NP. 

Aharonov, Jones, and Landau [3 1 gave a polynomial-time 
quantum algorithm to approximate the Jones polynomial 
J(K,t) of a knot K, uniformly for certain values of t. (See 
also Freedman, Kitaev, and Wang [9] for an earlier version 
of this result.) Given the conjecture that the Jones polyno- 
mial distinguishes the unknot, this result raises the question of 
whether unknottedness is in BQP. The error in the Aharonov- 
Jones-Landau algorithm has an extra exponential factor that 
depends on the knot diagram. For many values of f, any in- 
trinsic approximation of J(K,t) is #P-hard lfT9l . Whether un- 
knottedness is in BQP by some other algorithm remains an 
interesting question. 

Hempel lfl6ll showed that the fundamental group of any 
compact 3-manifold with geometric pieces (which is now 
known to be all compact 3-manifolds) is residually finite. 
Broaddus [7| refined Hempel's construction with a similar 
purpose to ours. 

In 2002, Agol [ 1 1 lower bounds for the genus of a knot are 
in NP. This would imply that knottedness is in NP, since the 
unknot is the only knot of genus 0. As of this writing, the full 
argument has not been written up. 

In 2005, Hara, Tani, and Yamamoto lfl4l claimed that un- 
knottedness is in AM n coAM. They have since retracted this 
result Ifl3l . 

In 2011, Musick ll22l claimed that unknottedness is in P. 
As of this writing, the author does not know the status of this 
result. 
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2. COMPLEXITY CLASSES 

We review some popular complexity classes, more to inter- 
pret Theorem 1 1.1 1 and place it in context than to prove it. See 
the Complexity Zoo |26| for a survey of complexity classes 
that we mention here, and many others. 

We (informally) defined the classes P and N P in the intro- 
duction. If D is a decision problem, we define the class P D 
to be the set of decision problems E that can be computed in 
polynomial time with the aid of an oracle that answers ques- 
tions in D. Likewise if X is a complexity class, we define P x 



to be the union of P D for all fleX. Likewise we can also 
define NP D and NP X . If NP C P D , then D is called NP-hard 
(in the Cook or Turing sense); if also D E NP, then it is called 
N P '-complete. 

The polynomial hierarchy is the union 

oo NP 

PH^IlNP^ . 
^ s *- — ' 

n=l „ 

An extension of the conjecture that P 7^ NP asserts that the 
polynomial hierarchy does not collapse, i.e., that each term in 
this union is larger than the previous one. As a rough anal- 
ogy, the non-collapse of PH is to P 7^ NP in complexity the- 
ory, as the generalized Riemann hypothesis is to the Riemann 
Hypothesis in number theory. Among many known condi- 
tional results, if NP = coNP, then the polynomial hierarchy 
collapses to its second level. Brassard [6| showed that 



Thus if 

De NPncoNP 

is NP-hard, then NP = coNP. 

A promise problem is a decision function D(x) defined only 
on some subset of input strings. (In other words, the set of 
input strings that satisfy a promise to the algorithm.) An al- 
gorithm for a promise problem must compute the value D(x) 
when x satisfies the promise, and can be either yes or no arbi- 
trarily otherwise. By contrast with non-promise problems, a 
promise problem in N P n coN P can be N P-hard. For instance, 
let D(x) be any NP-complete problem, and define E(x\,X2) to 
simply be D(x\), given the promise that exactly one of D(x\) 
and D(xq) is yes. Then it is not hard to show that D £ P E , so 
that E is also N P-hard. 

Technically speaking, many problems require a syntactical 
promise, for example that the input to a computational knot 
theory algorithm must describe a valid knot. If valid input 
syntax can be checked in polynomial time, then it is an irrel- 
evant promise, because incorrect input can efficiently be as- 
signed the value "no". So results such as Brassard's theorem 
still hold. This is significant for us, because the validity of 
an encoding of a knot diagram can be checked in polynomial 
time. 

The class BPP is the class of questions that can be answered 
in polynomial time with random choices, such that the correct 
answer is computed with probability at least I . (Equivalently, 
the probability of correctness converges to 1 exponentially 
with repeated trials.) The class BQP is similar but harder to 
define: It uses algorithms with access to quantum randomness, 
or quantum algorithms. Quantum algorithms require quantum 
computers, which do not yet exist. Nonetheless, BQP can 
be taken seriously as an not-necessarily-realistic complexity 
class, just like many other complexity classes. Membership in 
NPncoNP is sometimes taken as evidence of membership in 
BQP, even though the most popular conjecture is that neither 
class contains the other. 
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The class AM (Arthur-Merlin) is an important variation of 
NP. We imagine that the verifier (Arthur) is supplied a cer- 
tificate by the prover (Merlin). In the class NP, Merlin states 
a proof, then Arthur analyzes it deterministic ally and in poly- 
nomial time. In the class AM, Merlin statistically persuades 
Arthur by answering randomly chosen questions in a bounded 
number of rounds. It is known that one round is just as pow- 
erful as any bounded number of rounds [5], and it is known 
that Arthur might as well simply show Merlin coin flips ifTTI . 
Even though AM looks more powerful than NP, it is a stan- 
dard conjecture that AM = NP. The conjecture is similar to 
the conjecture BPP = P; both conjectures are true if suffi- 
ciently good pseudorandom number generators exist. 

The class #P is the class of questions whose answers are 
non-negative integers rather than yes or no. By definition, a 
question in #P counts the number of certificates that satisfy a 
polynomial criterion together with the input, whereas the anal- 
ogous question in N P only asks if there is at least one certifi- 
cate. It is known that P #p , which captures #P-hardness, con- 
tains all of PH (and BQP as well). So #P-hardness is thought 
to be qualitatively much harder than NP-hardness. 

3. ALGEBRA 



are integer polynomials, a is a root of an irreducible integer 
polynomial h € Z[x], and 

logdeg/; = poly (n,m, log d, log r) 
log log 1 1 /z 1 1 = poly (n,m, log d, log r). 

Actually, Koiran writes 

Xk=gk(a)/a, 

with 

logloga = poly (n,m, log d, logr) . 

This denominator can just be absorbed into a and h. 

Now the idea is to find a corresponding root a of h(x) in 
some prime field Z/p. 

Theorem 3.2 (Lagarias-Odlyzko (20), Weinberger (25)). Let 
h S 1\x\ be an irreducible polynomial of degree D and let R = 
\\h\\. Assuming the generalized Riemann hypothesis, there is 
a prime p such that h(x) has a root inZ/p and such that 

p = poly(D,logR). 



In this section and later, we will often use the polynomial- 
class bound, that for some function /(«), there exists an a > 
such that 

f(n) = 0(n a ). 

We will write this as 

/(«) =poly(n), 
and likewise also the multivariate version. 

3.1. Polynomial equations 

Besides recent geometric topology results, our construction 
rests mainly on the following theorem of Koiran. We define 
the norm 1 1/| | of a possibly multivariate integer polynomial / 
to be the maximum of \a\, where a is a coefficient of /. 

Theorem 3.1 (Koiran Oil Thms. 4 & 7]). Let 

f\Jli---ifm & Z[xi,X 2 ,...,X„] 

be non-constant integer polynomials with 



d = max deg fk r = max 1 1 

k k 



Suppose that the equation fix) = has a solution in C". Then 
it has a solution of the form 

(xi,X2,...,x n ) = (gi(a),g 2 (a),...,g n (a)), 



where 



Actually, Lagarias-Odlyzko and Weinberger establish a 
density version of Theorem |3.2| which is a special case of 
the effective Cebotarev density theorem. Koiran IfTTI Cor. 1] 
states this density version as follows: Let 7C(x) be the number 
of primes p < x, let 7tf, (x) be the number of primes p < x mod- 
ulo which h(x) has a root, and let A/, be the discriminant of h. 
Then 

„ t w - lo 8 A h - c^/xlog{A h x D ) 

%W > £ , (i) 

where c is an absolute constant. To understand this estimate, 
we first recall the prime number theorem: 



71 (x) 



Inx 



(2) 



Then we recall the formula for the discriminant: 



A,, = res (h,h!) = detS(h,h'). 

Here h' is the derivative of h, res(/,g) is the resultant of / and 
g, and S(f,g) is the Sylvester matrix whose determinant is the 
resultant. By separately bounding the terms of detS(h,h'), we 
obtain 

logA A =poly(D,log J R). (3) 

Equations ([l}, and Q imply the estimate in Theorem 3.2 
We only need the weaker estimate 

log/? = poly(log£>,loglogfl). 



gl,g2,---,gn € Z[xi,X2,-..,x n ] 



We can also interpret Theorem |3.2| as stated, or this estimate, 
as a separate conjecture in number theory that appears to be 
much weaker than GRH. 
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Theorem 3.3 (Koiran [17, Lem. 3]). Assuming the hypotheses 
of Theorem \3.1\ and GRH, there is a prime p with 

log/? = poly(n,m,logt/,logr) 

such that f(x) = has a solution in (Z/p)". 

Again, we need only one such prime. Koiran needs an ad- 
equate supply of them, to show that deciding the solvability 
of f(x) = over C is in AM. He establishes a statistical gap 
between the cases in which there is or is not a solution. 

Proof. Theorem |3. 1 1 yields 

/(!(«)) = o, 

where h(a) — and h(x) is irreducible. Theorem 1 3 . 2 j provide s 
a prime p such that h(x) has a root a G Z/p. Then 

f k (g k (a)) = ^ h(x)\f k (g k (x)) e 1[x] 
=>■ Mg k (a))=0eZ/ P . 

So the existence of a yields a modular solution of fix) = 
0. " □ 



These maps must satisfy the axioms of a commutative Hopf 
algebra. The Hopf algebra axioms imply that for every com- 
mutative ring F, the set Hom(R,F) is a group. We imagine 
that R is the coordinate ring of a space G, one that is morally 
a group, even when we have not yet chosen F. We then write 
R = Z(G) and we write G(F) = Hom(R,F). In the terminol- 
ogy of algebraic geometry, G = Spec/? is a group object in the 
category of affine schemes, and G(F) is the set of F -rational 
points of G. 

Theorem 3.4. Let G be an affine algebraic group over Z and 
assume GRH. Let T be a discrete group with a finite presenta- 
tion of length I. If there is a homomorphism 

p c :T^G(C) 

with non-commutative image, then there is also a homomor- 
phism 

p p :T^G{Z/p) 
with non-commutative image, for a prime p such that 
log/? = poly (£). 



3.2. Algebraic groups 



Proof. The theorem is a direct application of Theorem 3.1 



Our use of Theorem 



3.3 rests on the fact that SL(2) is an 



affine algebraic group defined over the integers Z. The con- 
cept of an affine algebraic group yields an organized defini- 
tion of versions of a group, for example SL(«,F), for every 
base field (or ring) F simultaneously, using integer polyno- 
mial equations. In our case, SL(2) is the ring 

Z(SL(2)) = f Z[x\,X2,X3,X4]/(x\X4 —X2X3 — 1), 
since the relation in this ring expresses the assertion 



det 



x\ X2 
X3 X4 



L. 



With such a definition, we can then define the group SL(2,F) 
(in the traditional sense of a set with a group law) as the set of 
ring homomorphisms 

SL(2,F) = Hom(Z(SL(2)),F). 

This means that SL(2,F) satisfies the same polynomial rela- 
tions for every F. Also, the group law of SL(2,F) and the 
matrix inverse are expressed by the same polynomial equa- 
tions for every F. (Since the determinant is 1, inverse AT 1 of 
a matrix M is the same as "adjugate" matrix adj(M), which 
has a polynomial expression in the entries of M.) 

In general, an affine algebraic group (over Z) is defined in 
reverse as a commutative ring R (also over Z) together with a 
reverse multiplication map, a reverse identity, and an inverse 
map: 



The condition that pc or p p is a group homomorphism is the 
condition that the images of the generators satisfy the defining 
relations of F. The relations of F become polynomial equa- 
tions in the coordinate ring Z(G) of the algebraic group G. 
For a fixed choice of G, encoding the group relations as poly- 
nomial equations is only more complicated by a constant fac- 
tor. 

To establish the non-commutativity property, we use the 
"Rabinowitsch trick" from algebraic geometry. If pc is non- 
commutative, then r has at least one pair of generators x and 
y whose images do not commute. We can write the relation 
xy yx as a set of polynomial expressions f(x,y), where x 
and y are the variables representing x and y, such that for at 
least one value of k, 

Then we can add new variables / together with the polynomial 
relation 



Y^ l kfk{x,y) 

k 



1. 



□ 



m : R R®R 



i:R->Z 



s-.R^R. 



4. THE ALGORITHM 

4.1. Description of input 

The most traditional way to describe a knot K is by a knot 
diagram in the plane with crossings. Another description is 
a triangulation of S 3 \ K, either one in which K is an ideal 
vertex, or one in which the peripheral torus of K is triangu- 
lated. A knot complement S i \K can also be described by an 
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incomplete Heegaard diagram, in which a solid torus neigh- 
borhood of K appears as one of the 0-handles or 3-handles; 
the knot complement is then a special case of a compression 
body. (We also allow Heegaard diagrams with more than the 
minimum set of circles.) 

Since a triangulation can be thickened to a handle decom- 
position, it yields a Heegaard diagram. (If it is a triangulation 
of S 3 \ K as a manifold with boundary, we can first collapse 
the boundary torus to an ideal vertex.) The Heegaard diagram 
has a crossing for every flag consisting of a triangle and an 
edge of the triangle. Therefore if the triangulation has n tetra- 
hedra, the Heegaard diagram has at most 6n crossings, which 
is a constant factor of overhead. 

There is also a canonical conversion from a Heegaard di- 
agram of a knot complement (or any 3-manifold) to a trian- 
gulation, or a knot diagram of K to a triangulation of S 3 \ K 
with an ideal vertex and two other vertices. The easiest way 
to describe either conversion is by a simple spine. A simple 
spine is a 2-complex in S 3 \ K which is dual to a generalized 
triangulation. If S 3 \ K has a Heegaard diagram, then we can 
take the simple spine to be the union of the Heegaard surface 
H and disks Dj attached at all of the attaching circles of the 
Heegaard diagram drawn on H. If the Heegaard diagram has n 
crossings, and if every complementary region of the diagram 
is a disk, this yields a triangulation with n tetrahedra. 

If K has a knot diagram drawn on S 2 , then we can sew an 
annulus onto S 2 that follows K and makes a torus sleeve for 
it in S 3 (7, Fig. 8]. If K has n > crossings, this yields a 
triangulation with An tetrahedra. 

The other conversion is from a triangulation or a Heegaard 
diagram of a knot complement to a knot diagram. An efficient 
conversion is not possible in this direction. For example, if 
K is a knot and K' is its (2, 1) cable, then their Alexander 
polynomials satisfy the relation 

A K ,(t)=A K (t 2 ). 

If Kq is a knot with a non-trivial Alexander polynomial and 
K n is the result of (2, l)-cabling it n times, then the degree 
of Afc n (f ) grows exponentially in n, and therefore so does the 
crossing number and even the genus of K n . On the other hand, 
S 3 \ Kn is a torus sum of S 3 \ Kq with n copies of the (2,1) 
cable inside of a solid torus. It therefore has a triangulation in 
which the number of simplices only grows linearly in n. 

The drawback of a triangulation of a knot complement is 
that it isn't obvious when the input is admissible, i.e., when it 
is in fact a triangulation of a knot complement. However, it 
still makes sense as a promise problem. 



4.2. Proof of the main result 

As stated in the introduction, all of the actual topology in 
our argument is in the following result. 

Theorem 4.1 (Kronheimer-Mrowka OJD). IfK C S 3 is a non- 
trivial knot, then Tt\ (S 3 \ K) has a non-commutative represen- 
tation in SU(2). 



Proof of Theorem ]! .1\ With any of the given descriptions of 
K, it is easy to write a polynomial-length presentation of 
K\(S 3 \ K). In the case of a knot diagram, it is the Wirtinger 
presentation. In the case of a Heegaard diagram, we can dis- 
card extra Heegaard circles and then read the presentation 
from the diagram. The certificate then consists of a prime 
p and a non-commutative group homomorphism 

p p : 7ti{S 3 \K) -> SL(2,Z/p). 



By Theorem |4.1| there is a non-commutative group homomor- 
phism 

p c : %\ (S 3 \K) ->■ SU(2) c SL(2,C). 

By Theorem 13.41 p and p p are available such that p has at 
most polynomially many digits in the length of the description 
of K. The group homomorphism is described by its values on 
the generators of %\ (S 3 \ K). The verifier only needs to check 
that the relations hold and that the images of the generators do 
not all commute. □ 



5. BOUNDS 

One question is whether Theorem |1.1| can be established 
unconditionally, i.e., without GRH or Theorem 3.2 As far as 



we know, proving Theorem 3.2 unconditionally is a difficult 
open problem in number theory. The hypotheses of Theo- 
rems [XT] and [33] cannot produce every possible polynomial 



that satisfies the hypotheses of Theorem 3.2 given polyno- 
mial bounds on r and d. However, we can design the equations 
f(x) = as a straight-line program to directly build a wide va- 
riety of choices for h{x). In other words, we can choose n — 1 
equations in the inductive form 

Xk+i = fk(xi,x 2 ,...,x k ), 

so that Xf, for k > 1 is a polynomial in x\ . Then a final equation 

fn (-^1 3 X% , . . . , X n ) 

is directly equivalent to h(x\ ) = for a very complicated poly- 
nomial h(x). In this case Koiran's construction cannot do 
better than to take x\ = a and use the same h(x). It seems 
very possible that these choices of h(x) are as difficult, in 
a complexity-theoretic sense, as all h(x) that satisfy the hy- 



potheses of Theorem 3.2 



We do not know if the constraints on a homomorphism 

^(5 3 \/T)^G(C), 

for an algebraic group G, are as programmable as general al- 
gebraic equations. If so, it would be evidence that obtaining 
the type of certificate described by Theorem [T7JJ uncondition- 
ally is as difficult as Theorem 3.2 itself. Of course, there could 



be some completely different type of certificate for knotted- 
ness, or there could be some good algorithm (possibly a quan- 
tum algorithm) to determine knottedness without the aid of a 
certificate. 



It is easy to show unconditionally that there is a prime mod- 
ulo which h(x ) has a root, but with a much weaker bound than 
Theorem 3.2 For instance, h(x) attains the value ±1 for at 
most 2D choices of x; thus we can take some other x with 
|x| < D and then let p be a prime divisor of h{x). (Or, all of 
our results work just as well when h has a root in ¥ q , if q is 
a prime power that satisfies the same bound. We can let p be 
the first prime modulo which h has positive degree, then de- 
fine Wq by an irreducible factor of h(x) over Z/p.) We still 
obtain a non-commutative representation of %\ (S 3 \ K) into a 
group SL(2,Z//?), only with a larger prime p. Without GRH, 



we obtain 



where 
obtain 



|SL(2,Z/p)|=exp(exp(poly(£))), 
is the length of the description of K. With GRH, we 

|SL(2,Z/ j p)|= eX p(poly(^)). 



These bounds improve similar bounds obtained by Broaddus 
0- 
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